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A portable transaction arrangement for permitting a user to conduct a charge card 
transaction vis-a-vis a charge card terminal of an electronic transaction system. 
The charge card terminal is configured to communicate with a charge card for the 
purpose of conducting the charge card transaction. The charge card is one of a 
magnetic stripe card and an electronic smart card. The portable transaction 
arrangement includes an emulation card having an emulation card interface. The 
emulation card interface emulates an interface of the charge card. The interface of 
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card terminal. There is also included a portable emulation card configuring device 
arranged to be used in conjunction with the emulation card, which in turn includes 
a memory configured to store first charge card data pertaining to a first charge 
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ART-UNIT: 2132 

PRIMARY-EXAMINER: Barron; Gilberto 
ASSISTANT-EXAMINER: Zand; Kambiz 

ATT Y-AGENT- FIRM: Moser, Patterson & Sheridan, LLP 



ABSTRACT : 

A computer configured to authenticate a user to an electronic transaction system is 
disclosed. The computer includes a central processing unit and electronic 
authorization firmware disposed within the computer and in electronic communication 
with the central processing unit. The electronic authorization firmware includes a 
non-volatile memory circuit configured to store at least one of a user private key 
and user identification data and a firmware identification data. The electronic 
authorization firmware further includes decryption logic circuitry disposed between 
the non-volatile memory circuit and the electronic transaction system. The 
decryption logic circuitry is configured to prevent unauthorized access to at least 
one of the user private key and the user identification data in the non-volatile 
memory circuit. The electronic authorization firmware also includes encryption 
logic circuit coupled to the electronic transaction system and configured to 
transmit digital data encrypted using the user private key for transmission to the 
electronic transaction system. The digital data authenticates the user to the 
electronic transaction system, wherein the non-volatile memory is inaccessible by 
the central processing unit without traversing the decryption logic circuitry. 

25 Claims, 14 Drawing figures 
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BASIC-ABSTRACT : 



NOVELTY - A share secret is searched from a share secret table in a portable 
electronic authorization device ( PEAD ) (200) . Received digital data representing a 
secure message, is decrypted, if the share secret is found otherwise a share secret 
is computed in the PEAD . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the following: 

(1) Internet-based secure message transmission method; and 

(2) Internet-based secure message exchanging method. 

USE - For receiving a secure message pertaining to an electronic transaction 
conducted over Internet. 

ADVANTAGE - Allows transaction approvals to occur within the portable electronic 
authorization device ( PEAD ) , hence enhances the confidentiality of the user 
identification data and the user's private key and enhances the integrity of the 
transaction process. 

DESCRIPTION OF DRAWING (S) - The figure shows a portable electronic authorization 
device. 

Portable electronic authorization device 200 
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BASIC-ABSTRACT: 

NOVELTY - The invention discloses a method its and device for examining and 
approving request of business transaction between an electronic trading system with 
electronic service authorization signature being used and a portable electronic 
authorization device (PEAD) carried by a user. The method includes PEAD accepts a 
first digital receipt representing request of business transaction. The PEAD 
provides an information of approving request for the user. When the user approves 
the request, the PEAD accepts a second digital receipt representing electronic 
service authorization signature. The invention includes a remote agent acting as a 
bridge between the electronic trading system and the PEAD . The invented method and 
device can be used in sales point, providing trading capability safely and 
expediently. 
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